14 Jun ISO 27001 Certification | Category - Pivot Point Security ISO 27701 Privacy Extension “Lessons Learned”: Scope January 13, 2024 By Richard Barrus The new ISO 27701 standard enables organizations to add a “certifiable extension” for privacy information management to an existing ISO... Continue reading
11 Jun ISO 27001 Certification | Category - Pivot Point Security Processor Versus Controller: What Do These Privacy Terms Mean? And Does One or Both Apply to Your Business? January 14, 2024 By Richard Barrus The new ISO 27701 standard, “Security techniques — Extension to ISO/IEC 27001 and ISO/IEC 27002 for privacy information management — Re... Continue reading
10 Jun ISO 27001 Certification | Category - Pivot Point Security What is the ISO 27701 Privacy Extension to ISO 27001 and Why Do I (as a Regulated SMB) Care? January 15, 2024 By Richard Barrus ISO/IEC 27701:2019 “Security techniques — Extension to ISO/IEC 27001 and ISO/IEC 27002 for privacy information management — Requirement... Continue reading
18 May ISMS Consulting Why You Should Tell Your ISO 27001 or SOC 2 Auditor That You Want as Many Nonconformities as Possible January 15, 2024 By John Verry Part of my day job is acting as Pivot Point Security’s CISO. In that role, I have participated in our ISO 27001 ISMS Internal Audit and... Continue reading
07 May ISO 27001 Certification | Category - Pivot Point Security 13 Million Reasons to Scope Before Gap Assessment – Pivot June 13, 2024 By John Verry Over the last 20+ years, one of the most frequent questions I’ve answered for clients that need to move to a (more) “provably secure” s... Continue reading